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DETAILED ACTION 

1 . This action is in reply to applicant's correspondence of 26 December 2001 . 

2. Claims 1-25 are pending for examination. 

3. Claims 1-25 remain rejected. 

Oaim Rejections - 35 USC §102 
The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Oflfice action: 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1-25 are rejected under 35 U.S.C. 102(b) as being anticipated by Kambayashi et 
al, U.S. Patent 6,477,649 B2. 

5. As per claim 1 ; "A method of distributing data comprising: 

(a) encrypting a plurality of data units each with 

one of a sequence of keys [figures 111-140 and associated descriptions, whereas 
the use of a seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and associated method where the 
multimedia content clearly is formatted in a plurality of data units, and encryption at a per 
key per unit information, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.]; 

(b) communicating encrypted data units to 
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a plurality of user terminals [figures 1 1 1-140 and associated descriptions, whereas 
the use of a seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and associated method such that content is 
broadcast to reception terminals, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner,]; 

(c) communicating at least one seed value to 

a user terminal [figures 1 1 1-140 and associated descriptions, whereas the use of a 
seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and associated method such that 
cryptographic key generation/regeneration information (i.e., the key seed) is broadcast to 
reception terminals, clearly encompasses the claimed limitations as broadly interpreted 
by the examiner.]; 

(d) generating from the seed value or values 

a sequence of keys greater in number than 

the number of seed values communicated to the user terminal [figures 
1 1 1-140 and associated descriptions, whereas the use of a seed/key based 
cryptographic security/licensing information content 

recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the key seed at the reception terminals is 
clearly greater than the number of seed(s), and clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.]; and 

(e) decrypting data units at the user terminal using 
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the said sequence of keys, characterized 

in that in step (d) a sequence of keys constituting an arbitrarily doubly 
bounded portion of the sequence of keys of step (a) is generated, and 

in that the position in sequence of the lower and upper bounds of the said 
portion are determined by the at least one seed value communicated in step (c) 
[figures 1 1 1-140 and associated descriptions, whereas the use of a seed/key based 
cryptographic security/licensing information content 

recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the key seed at the reception terminals is such 
that the inclusive user/content identification/licensing information as applied to 
the seed key regeneration clearly produces a user terminal subset of the entire key 
space, and clearly encompasses the claimed limitations as broadly interpreted by 
the examiner.].". 



6. Claim 2 additionally recites the limitation that; "A method according to claim 1, in which 
the sequence of keys used in step (a) is generated by: 
(a) 

operating on one or more initial seed values and 

generating a greater number of intermediate seed values, which intermediate seed values 

blind the initial seed values: 
(b) further 

operating on the values produced by the preceding step and 
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generating thereby a still greater number of further values, which further values 

blind the values produced by the preceding step; 
(c) iterating step (B) until 

the number of values produced is equal to or greater than 
the number of keys required for step (a).". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
muhiple cryptographic algorithms, inclusive of hashing (i.e., blinding) functions, whereas the 
functions are clearly iterative (i.e., figures 134-138) and therefore producing intermediate 
seeds/keys, and clearly encompasses the claimed limitations as broadly interpreted by the 
examiner). 

7. Claim 3 additionally recites the limitation that; "A method according to claim 1, in which 
step (d) includes 

combining values derived from 

a plurality of different seed values.". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
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multiple cryptographic algorithms, inclusive of hashing (i.e., blinding) functions, whereas the 
functions are clearly iterative (i.e., figures 134-138) and therefore producing intermediate 
seeds/keys via the plurality of different seed values, and clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.). 

8. Claim 4 additionally recites the Umitation that; "A method according to claim 1, in which 
step (d) includes 

operating on 

a plurality of seed values with each of 

a plurality of different blinding functions.". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
muhiple cryptographic algorithms, inclusive of hashing (i.e., plurality of different blinding 
functions) functions, whereas the functions are clearly iterative (i.e., figures 134-138) and 
therefore producing intermediate seeds/keys via the plurality of different seed values, and clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.). 

9. Claim 5 additionally recites the limitation that; "A method according to claim 4, 
including: 

(I) operating on 
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at least one root seed value with each of 

a set of different blinding functions thereby producing a plurality of 
further values; 

(II) operating with 

each of the set of different blinding functions on 
the further values produced by 
the preceding step or 
on values derived therefrom; 

(III) iterating step (II) and thereby producing, by the or each iteration, 

a next successive layer in a tree of values; 

(IV) in step (a), using as the sequence of keys 

values derived from the sequence of seeds in one or more of the layers produced 
by step (HI); and 

(V) in step (c), communicating to a user terminal 

at least one value from within the body of the tree, 

the position in the tree of the or each value communicated to the user 
terminal thereby determining 
the position and 

extent of the portion of the sequence of keys available to 
the user for use in decrypting data units.". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
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content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
multiple cryptographic algorithms, inclusive of hashing (i.e., plurality of different blinding 
functions) functions, whereas the functions are clearly iterative (i.e., figures 134-138) and 
therefore producing intermediate seeds/keys via the plurality of different seed values, and clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.). 

10. Claim 6 additionally recites the limitation that; "A method according to claim 5 
including, in step (1) 

(i) operating with 

the set of different blinding functions on 
plurality of different seed values 

(ii) for each of the different blinding functions, 

combining 

the resuk of operating with 

one blinding function on one of the seed values and 
the result of operating with 

the same or another blinding function on another of the respective 
seed values, thereby producing 

a plurality of further values.". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
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content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
multiple cryptographic algorithms, inclusive of hashing (i.e., plurality of different blinding 
functions) functions, whereas the functions are clearly iterative (i.e., figures 134-138) and 
therefore producing intermediate seeds/keys via the plurality of different seed values, and clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.). 

1 1 . Claim 7 additionally recites the limitation that; "A method according to claim 3, in which 
step (d) includes 

(I) combining 

first and second values derived from respective 

first and second blinding function chains, thereby producing 

a first next seed or key, the first and second blinding function chains 
having different respective seeds 

(II) combining 

a value derived fi*om 

a position in the first chain subsequent to 
the position of the first value and 
a value derived from 

a position in the second chain preceding 

the position of the second value, thereby producing 
a further next seed or key value.". 
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The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
multiple cryptographic algorithms, inclusive of hashing (i.e., plurality of different blinding 
functions) functions, whereas the functions are clearly iterative (i.e., figures 134-138) and 
therefore producing intermediate seeds/keys via the plurality of different seed values, and clearly 
encompasses the claimed limitations as broadly interpreted by the examiner). 

12. Claim 8 additionally recites the limitation that; "A method according to claim 7, 
including 

iterating step (II) thereby producing further key values, in each iteration 
values from positions 

subsequent to the previous position in the first chain and 
preceding the previous position in the second chain 
being combined.". 

The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
muhiple cryptographic algorithms, inclusive of hashing (i.e., plurality of different blinding 
functions) functions, whereas the functions are clearly iterative (i.e., figures 134-138) and 
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therefore producing intermediate seeds/keys via the plurality of different seed values, and clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.). 

13. Claim 9 additionally recites the limitation that; "A method according to claim 1 in which 
the seed values are communicated to 

the user terminals, via a communications network.". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key generation/regeneration information (i.e., the key seed) is broadcast to 
reception terminals over various network configurations, and therefore clearly encompasses the 
claimed limitations as broadly interpreted by the examiner.). 

14. Claim 10 additionally recites the limitation that; "A method according to claim 9 in 
which 

the seed values are communicated from 

a plurality of key management nodes to customer terminals. 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key generation/regeneration information (i.e., the key seed) is broadcast to 
reception terminals over various network configurations, inclusive of intermediate nodes (i.e., 
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key management server node to customer client terminals), and therefore clearly encompasses 
the claimed limitations as broadly interpreted by the examiner.). 

15. Claim 14 additionally recites the limitation that; ''A method according to claim 1, in 
which 

each encrypted data unit carries 

an unencrypted index number to 

identify to any receiver which key in the sequence should be used to 

decrypt that data unit.". 
The teachings of Kambayashi et al suggest such limitations (figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution (i.e., unencrypted index information to identify receiver reception 
terminals)/reproduction apparatus and associated method where the multimedia content clearly is 
formatted in a plurality of data units, and encryption at a per key per unit information, clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.). 

16. Claim 15 additionally recites the limitation that; "A method according to claim 1 where 
the seeds required by any receiver to construct the keys for a specific sub-range of the 

entire key sequence are 

communicated in an order that implicitly identifies each seed.". 
The teachings of Kambayashi et al suggest such limitations (i.e., figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
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content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the initial key seed at the reception terminals is a function of 
the licensing/user specific, and therefore destination specific, and implicitly identifying each 
seed, and clearly encompasses the claimed limitations as broadly interpreted by the examiner.). 

17. Claim 16 additionally recites the limitation that; '"A method according to claim 1, in 
which 

multiple data senders use the same sequence of keys as each other to 
encrypt the same or different data units.". 
The teachings of Kambayashi et al suggest such limitations (figures 1 11-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
(same sequence of keys as each other) content recording/distribution (multiple data 
senders)/reproduction apparatus and associated method such that content is broadcast to 
reception terminals, clearly encompasses the claimed limitations as broadly interpreted by the 
examiner.). 

1 8. Claim 17 additionally recites the limitation that; "A method according to claim 1, in 
which 

each key in the sequence generated from the seeds is used as 
an intermediate key to be combined with 
another intermediate key or sequence of keys to produce 

a sequence of keys to encrypt or decrypt the data units.". 
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The teachings of Kambayashi et al suggest such limitations (figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key generation via the key seed at the source is such that the inclusive user/content 
identification/licensing information as applied to the seed key generation clearly produces a 
intermediate key to be combined with iteratively generated intermediate key or sequence of keys, 
and clearly encompasses the claimed limitations as broadly interpreted by the examiner.). 

19. As per claim 22, this claim is the apparatus for the method claim 1 above, and is rejected 
for the same reasons provided for the claim 1 rejection, as such; "A conmiunications network 
comprising 

means arranged to operate by method in accordance with the method of claim 1 .'\ 

20. Claim 23 additionally recites the limitation that; "A network according to claim 22, in 
which 

the data is distributed using 
a multicast or 

broadcast transmission mode.". 
The teachings of Kambayashi et al suggest such limitations (figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that content is 
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broadcast to reception terminals, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.). 

21 . Claim 24 additionally recites the limitation that; "A network according to claim 22, 
in which the network includes 

a virtual private network (VPN) and 
in which different combinations of seeds for constructing difiTerent sub-ranges of keys for 
decrypting data 

give members of the virtual private network 

different periods of access to the VPN.". 
The teachings of Kambayashi et al suggest such limitations (figures 1 11-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that content is 
broadcast across the Internet, or the like, to reception terminals, of which such Internet paths are 
inclusive of secure pathways (i.e., VPN's/Ipsec, etc.,), and clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.). 

22. As per claim 25, this claim is the apparatus for the method claim 1 above, and is rejected 
for the same reasons provided for the claim 1 rejection, as such; "A data carrier storing a 
plurality of data units encrypted for use in 

a method according to claim 1.". 
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23. As per claim 1 1; "A method of encrypting data for distribution comprising: 

(a) operating on 

at least one root seed value with 

one or more blinding functions, thereby producing a plurality of further values 
[figures 1 1 1-140 and associated descriptions, whereas the use of a seed/key based 
cryptographic security/licensing information content recording/distribution/reproduction 
apparatus and associated method such that cryptographic key regeneration via the key 
seed at the reception terminals is a function of multiple cryptographic algorithms, 
inclusive of hashing (i.e., blinding) functions, and clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.]; 

(b) operating with 

one or more blinding functions on 

the further values produced by the preceding step or on values derived therefrom 
[figures 1 1 1-140 and associated descriptions, whereas the use of a seed/key based 
cryptographic security/licensing information content recording/distribution/reproduction 
apparatus and associated method such that cryptographic key regeneration via the key 
seed at the reception terminals is a function of multiple cryptographic algorithms, 
inclusive of hashing (i.e., blinding) fimctions, whereas the functions are clearly iterative 
(i.e., figures 134-138), and clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.]; 

(c) iterating step (b) and thereby producing, by the or each iteration. 
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a next successive layer in a tree of values [figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing 
information content recording/distribution/reproduction apparatus and associated method 
such that cryptographic key regeneration via the key seed at the reception terminals is a 
function of multiple cryptographic algorithms, inclusive of hashing (i.e., blinding) 
functions, whereas the functions are clearly iterative (i.e., figures 134-138), and clearly 
encompasses the claimed limitations as broadly interpreted by the examiner.]; 
(d) encrypting 

a plurality of data units using 

a sequence of key values derived fi"om 

one or more of the layers generated by step (c) [figures 11 1-140 and 
associated descriptions, whereas the use of a seed/key based cryptographic 
security/licensing information content recording/distribution/reproduction 
apparatus and associated method where the multimedia content clearly is 
formatted in a plurality of data units, and encryption at a per key per unit 
information, clearly encompasses the claimed limitations as broadly interpreted 
by the examiner.].". 



24. As per claim 12; "A method of communicating data to a group of users comprising: 

(a) encrypting data for distribution [figures 1 1 1-140 and associated descriptions, whereas 
the use of a seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and associated method where the multimedia 
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content and broadcast to multiple reception terminals, clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.]; 

(b) systematically and independently of group membership changes 

changing a key used in encrypting the data for distribution [figures 1 1 1-140 and 
associated descriptions, whereas the use of a seed/key based cryptographic 
security/licensing information content recording/distribution/reproduction apparatus and 
associated method such that cryptographic key regeneration via the key seed at the 
reception terminals is such that the inclusive user/content identification/licensing 
information as applied to the seed key regeneration clearly produces a user terminal 
subset of the entire key space, and clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.]; 

(c) communicating the data to the users [figures 1 1 1-140 and associated descriptions, 
whereas the use of a seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and* associated method such that content is 
broadcast to reception terminals, clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.]; and 

(d) at the users* terminals 

decrypting the data, characterized by generating fi-om 

a number of initial seed values 

a greater number of intermediate seed values, and 
deriving fi-om the intermediate seed values 
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the plurality of keys used in encrypting the data for distribution [figures 
1 1 1-140 and associated descriptions, whereas the use of a seed/key based 
cryptographic security/licensing information content 

recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the key seed at the reception terminals is such 
that the inclusive user/content identification/licensing information as applied to 
the seed key regeneration clearly produces a user terminal subset of the entire key 
space, and clearly encompasses the claimed limitations as broadly interpreted by 
the examiner.].". 

25. Claim 13 additionally recites the limitation that; "A method according to claim 12, in 
which 

every possible subset of the sequence of keys is derivable from 
a respective combination of seed values.". 
The teachings of Kambayashi et al suggest such limitations (figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing information 
content recording/distribution/reproduction apparatus and associated method such that 
cryptographic key regeneration via the key seed at the reception terminals is such that the 
inclusive user/content identification/licensing information as applied to the seed key regeneration 
clearly produces a user terminal subset of the entire key space, and clearly encompasses the 
claimed limitations as broadly interpreted by the examiner.). 
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26. As per claim 18; "A method of distributing data comprising 
encrypting a plurality of data units each with 

one of a sequence of keys and 
communicating the encrypted data units to 

a plurality of user terminals, characterized 

in that the sequence of keys is generated and allocated to application data 
units in accordance with a key construction algorithm, and 

in that copies of the key construction algorithm are distributed to 
a plurality of key managers so that, in use, receivers may 

obtain keys for access to an arbitrary portion of the data 

from 

a key manager without reference to 
any data sender or senders [figures 1 1 1-140 and 
associated descriptions, whereas the use of a seed/key 
based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and 
associated method such that cryptographic key regeneration 
via the key seed at the reception terminals is such that the 
inclusive user/content identification/licensing information 
as applied to the seed key construction algorithm(s) clearly 
produces a user terminal subset of the entire key space at 
various network nodes (plurality of key managers), and 
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clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.].". 

27. As per claim 20, this claim is the means plus function for the method claim 18 above, and 
is rejected for the same reasons provided for the claim 18 rejection, as such; "A key manager 
comprising 

means arranged to operate in accordance with the method of claim 18.". 



28. As per claim 19; "A method of operating a user terminal comprising: 

a) receiving 

a plurality of data units encrypted with 

a sequence of keys [figures 1 1 1-140 and associated descriptions, whereas 
the use of a seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and associated method where the 
multimedia content clearly is formatted in a plurality of data units, and encryption 
at a per key per unit information, clearly encompasses the claimed limitations as 
broadly interpreted by the examiner.]; 

b) receiving 

one or more seed values [figures 1 1 1-140 and associated descriptions, whereas the 
use of a seed/key based cryptographic security/licensing information content 
recording/distribution/reproduction apparatus and associated method such that 
cryptographic key generation/regeneration information (i.e., the key seed) is broadcast to 
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reception terminals, clearly encompasses the claimed limitations as broadly interpreted 
by the examiner.]; 

c) generating from the one or more seed values 

an arbitrarily doubly bounded key sequence larger in number than 

the number of seeds received in step (b) [figures 1 1 1-140 and associated 
descriptions, whereas the use of a seed/key based cryptographic security/licensing 
information content recording/distribution/reproduction apparatus and associated 
method such that cryptographic key generation/regeneration information (i.e., the 
key seed) is broadcast to reception terminals, clearly encompasses the claimed 
limitations as broadly interpreted by the examiner.]; and 

d) decrypting 

the application data units using 

the values generated in step (c) or values derived therefrom [figures 1 1 1-140 and 
associated descriptions, whereas the use of a seed/key based cryptographic 
security/licensing information content recording/distribution/reproduction apparatus and 
associated method such that cryptographic key regeneration via the key seed at the 
reception terminals is such that the inclusive user/content identification/licensing 
information as applied to the seed key regeneration clearly produces a user terminal 
subset of the entire key space, and clearly encompasses the claimed limitations as broadly 
interpreted by the examiner.].". 
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29. As per claim 21, this claim is the means plus fUnction for the method claim 19 above, and 
is rejected for the same reasons provided for the claim 19 rejection, as such; "A customer 
terminal comprising 

means arranged to operate in accordance with the method of claim 19.". 
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Conclusion 



24. Any inquiry concerning this communication or earlier communications from examiner 
should be directed to Ronald Baum, whose telephone number is (571) 272-3861, and whose 
unofficial Fax number is (571) 273-3861. The examiner can normally be reached Monday 
through Thursday from 8:00 AM to 5:30 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh, can be reached at (571) 272-3795. The Fax number for the organization 
where this application is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. For more information for 
unpublished applications is available through Private PAIR only. For more information about the 
PAIR system, see http://pair-direct.uspto. gov . Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Ronald Baum 
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